Bitbucket

This guide provides instructions on how to:

• Set up Beyond Identity [BI} Authenticator to sign and verify with Bitbucket
• Beyond Identity authenticator with GPG key entitlements can be used to sign and verify code based on typical Devops events like push, pull, etc. This is a powerful tool to ensure security of SDLC process. The event triggers the signature validation process as part of CI/CD pipeline.
• A GPG key generated on BI Authenticator can be used to sign many repositories, but a repository can be signed with only one key.
• The email used to sign must be enrolled in the Beyond Identity tenant.